Skip to main content

List Audit Logs

This API returns a list of audit log entries recorded within the tenant. Each entry captures an activity performed in the system, along with its source, service, and integrity hashes.

Endpoint Details

URL/v1/audit/logs
MethodGET
AuthorizationBearer Token

Request Headers

HeaderTypeDescription
Content-TypeStringMust be application/json

Response

Here is an example of a response when viewing a list of data:

Response
{
"items": [
{
"id": "1603aa7c-b4c8-40ce-a598-2168dd3c5192",
"tenant_id": "5ebde17c-01a1-4394-977b-9e611250cf5d",
"activity": "query_currentusergrouppermissions",
"module": "auth",
"status_code": "200",
"source": "10.42.5.229:42412",
"response_time": 5,
"created_by": "0a11c692-b992-4d02-8a55-22b005459c50",
"created_by_name": "Adit Adit",
"type": "User",
"message_type": "info",
"service": "gateway",
"hmac": "ec20b01697879e1753521a42981a79194f5eceb3e188c66cd21785f116972e01",
"prev_hash": "4c180c527138c5ac1adf3abdf3ac0223f01e1b67adcad373a74c4ae2715489bf",
"created_at": "2026-07-17T14:12:33+07:00",
"trace_id": "55df733dce91caa9"
},
{
"id": "aa153d08-d2f5-46d4-9d89-eb8c26b5600c",
"tenant_id": "5ebde17c-01a1-4394-977b-9e611250cf5d",
"activity": "query_sealstatus",
"module": "lock",
"status_code": "200",
"source": "10.42.5.229:35518",
"response_time": 1,
"created_by": "0a11c692-b992-4d02-8a55-22b005459c50",
"created_by_name": "Adit Adit",
"type": "User",
"message_type": "info",
"service": "gateway",
"hmac": "e9f7fbb06d45768b1c74343e56e7cf14121f9bb434437d51d377a4913ca93c8d",
"prev_hash": "b0e352312f572eff9017277e5ca035f1ec887b9a7124cd5ca157b5043e1d1cc0",
"created_at": "2026-07-17T14:12:33+07:00",
"trace_id": "22cafa83c5c676c1"
},
{
"id": "b1a8d630-0213-4f93-85f2-e2719e858195",
"tenant_id": "5ebde17c-01a1-4394-977b-9e611250cf5d",
"activity": "LockService.SealStatus",
"module": "lock.v1",
"status_code": "200",
"source": "192.168.50.19",
"created_by": "0a11c692-b992-4d02-8a55-22b005459c50",
"created_by_name": "Adit Adit",
"type": "User",
"message_type": "info",
"service": "lock",
"hmac": "d2a7d07e6eec4fc8d470ab37e3c47ab24c78ddcb6205f6eb8d71fb7fda8e1eec",
"prev_hash": "d1e9109d8917805baee306960a7dd6c937114dd6ce3b966074c08bf74781ab19",
"created_at": "2026-07-17T14:12:33+07:00",
"trace_id": "0c895bae3740ebca"
}
],
"pagination": {
"total": 3,
"page": 1,
"page_size": 20,
"last_page": 1
}
}

Field Descriptions

FieldTypeDescription
idUUIDUnique identifier of the audit log entry
tenant_idUUIDIdentifier of the tenant that owns the audit log entry
activityStringName of the activity that was performed
moduleStringModule in which the activity occurred
status_codeStringHTTP status code returned by the activity
sourceStringSource address (IP and port) that initiated the activity
response_timeIntegerTime taken to process the request, in milliseconds
created_byUUIDIdentifier of the user who performed the activity
created_by_nameStringDisplay name of the user who performed the activity
typeStringType of actor that performed the activity
message_typeStringSeverity or category of the log message
serviceStringService that produced the audit log entry
hmacStringHMAC value used to verify the integrity of the log entry
prev_hashStringHash of the previous log entry, forming a tamper-evident chain
created_atStringTimestamp of the activity in RFC 3339 date-time format
trace_idStringIdentifier used to trace the request across services
totalIntegerTotal number of audit log entries available
pageIntegerCurrent page number
page_sizeIntegerNumber of records returned per page
last_pageIntegerTotal number of available pages

info
  • A valid Bearer Token is required to access this endpoint.
  • The response returns audit log entries recorded within the tenant.
  • The response_time field may not be present for entries where it is not applicable.
  • The hmac and prev_hash fields form a tamper-evident chain used to verify the integrity of the audit log.